Static task
static1
Behavioral task
behavioral1
Sample
a00ef45f145f5ec6e8449ed78ee0f853_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a00ef45f145f5ec6e8449ed78ee0f853_JaffaCakes118
-
Size
323KB
-
MD5
a00ef45f145f5ec6e8449ed78ee0f853
-
SHA1
91684d53e7a8ff4ccb8c72ef40b3d81238e5a9ed
-
SHA256
3bcc1b268a7966e8810f11ffeab1fde95647dfa4de13f4bbd3b80b0ef15aa0d4
-
SHA512
b1e64d1aa9af448a17b2e3b0306949d62422cd1833cab339d19012f24cb3e717c49796f46fd7f1832952bb0b32a192f200cd32c678846b218c3ecd19058e2f57
-
SSDEEP
6144:krI6ew3ZD5BDktqdda8UqYiU5Z5hI3jqf1lFfbBkO3p9vOGiVr2yfNzrS7dBS:krCwZFVkod0T5hIzqfdfbBJuGiVxlzW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a00ef45f145f5ec6e8449ed78ee0f853_JaffaCakes118
Files
-
a00ef45f145f5ec6e8449ed78ee0f853_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 306KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ